Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/w8BCN9PykNPVNjJ9fCiNOVISlcM.roa
File: w8BCN9PykNPVNjJ9fCiNOVISlcM.roa (raw, json)
Hash identifier: kEFZRt52pTMKmiwmj1Orl953CZwvlfVBIw/tuzbXQTw=
Subject key identifier: C3:C0:42:37:D3:F2:90:D3:D5:36:32:7D:7C:28:8D:39:52:12:95:C3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A03475A77AD87005AB3972A06A9A54E1AF
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/w8BCN9PykNPVNjJ9fCiNOVISlcM.roa
Signing time: Mon 24 Aug 2026 15:48:40 +0000
ROA not before: Mon 24 Aug 2026 15:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 189.73.25.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
191.219.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:75:a7:7a:d8:70:05:ab:39:72:a0:6a:9a:54:e1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 24 15:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3c04237d3f290d3d536327d7c288d39521295c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:26:df:09:35:2b:e3:26:a1:9f:bc:15:a8:
d0:26:a8:df:39:6a:db:59:ca:f9:74:05:4b:56:66:
5c:2e:f5:74:f8:34:df:ec:3f:2d:ed:c6:40:b6:4e:
fa:fe:84:af:f7:a2:a5:ae:88:af:03:07:0e:e4:45:
13:b4:70:f8:9d:d2:89:a9:a9:ab:16:74:c6:18:6b:
b0:ba:84:89:dc:d8:31:e7:b5:e9:c4:85:f5:78:b1:
06:d7:ce:1a:dc:c3:08:57:b9:a7:12:fd:20:c9:af:
50:61:bf:be:d7:d4:ed:57:45:22:33:03:2c:e1:2d:
97:6b:af:c1:28:40:03:07:60:87:f2:8d:b8:17:ba:
0a:2e:bc:8d:d1:03:46:a5:f7:ef:81:3a:35:66:b5:
5d:39:f4:6b:a9:80:29:e3:b0:f3:01:ca:2f:c4:a2:
15:87:f0:c9:33:e5:c9:83:82:da:27:13:9e:f8:54:
71:00:72:97:9a:e0:ef:33:8f:2c:eb:e4:41:ed:2a:
98:ce:e6:a9:52:d7:ab:ee:c3:0e:f4:cd:0b:5f:90:
e3:f6:a4:ab:a4:d2:cf:30:9e:92:cb:63:55:f5:6e:
65:7c:45:da:42:f2:1e:e2:cb:78:f5:73:4c:50:b8:
1f:57:ef:45:9d:43:b3:76:eb:68:df:91:8f:4a:12:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:42:37:D3:F2:90:D3:D5:36:32:7D:7C:28:8D:39:52:12:95:C3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/w8BCN9PykNPVNjJ9fCiNOVISlcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.73.25.0/24
189.75.176.0/24
191.219.24.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:7a:9d:5a:76:71:d0:30:09:48:18:2b:6d:5c:73:94:0d:c1:
d0:a8:2a:cf:61:50:4b:86:c0:00:f8:e3:3f:59:cf:05:e6:86:
21:e5:b2:25:fe:fc:dc:f1:0a:22:dc:6c:b6:58:d1:52:e8:1c:
04:c4:ea:65:4d:09:13:8f:da:75:c3:f9:b3:c2:ef:42:98:3e:
9c:86:72:f1:78:34:21:4b:f1:fd:9c:46:60:0d:a0:ec:e9:c7:
5c:7b:26:b7:56:1a:66:dc:c0:f7:9c:1c:0b:8d:0d:cf:f1:4d:
c7:ef:3f:fc:dd:5e:1c:e6:90:e9:fc:cf:d4:3a:44:46:39:e6:
f7:39:c4:21:cb:e5:33:81:f4:01:6b:1e:6c:53:cd:2b:c7:1c:
f8:3e:af:5a:2b:d3:9c:b8:3a:f6:1a:5f:4a:f9:74:cb:fc:0b:
89:be:e8:19:1e:58:e9:17:b0:d7:d0:63:f0:34:3b:c0:73:3e:
55:34:1c:f1:56:87:ec:a7:8f:3c:ef:7b:52:1d:b1:a9:d2:b9:
96:3f:b3:42:2b:7e:5c:30:7a:24:d9:6a:59:1a:57:4a:49:4b:
d1:20:0b:24:c9:68:31:a9:6e:42:58:ed:6b:01:ea:a2:df:17:
6c:6c:fd:fd:ad:f6:97:41:1c:bc:8e:6f:60:c1:82:5e:6c:f4:
d1:14:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:30 2026 by rpki-client